This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft
File:                     B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft (raw, json)
Hash identifier:          mZV6T4aPq3ozvOoMRdxs6P2VM0bERTFCHuBu189FvEE=
Subject key identifier:   F8:B5:C2:3E:C8:D1:65:59:63:E7:AB:3B:2F:62:2D:BB:83:EA:8B:52
Authority key identifier: B9:11:D3:4F:2E:80:14:0D:63:AE:02:F4:CB:E7:19:E7:D9:72:C6:F6
Certificate issuer:       /CN=B911D34F2E80140D63AE02F4CBE719E7D972C6F6
Certificate serial:       76BDB493C2F3B32378F3322C08D000F76039FCA3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft
Manifest number:          FC
Signing time:             Mon 02 Feb 2026 03:21:15 +0000
Manifest this update:     Mon 02 Feb 2026 03:16:15 +0000
Manifest next update:     Thu 05 Feb 2026 12:48:15 +0000
Files and hashes:         1: B911D34F2E80140D63AE02F4CBE719E7D972C6F6.crl (hash: yZTEPpA7fk0BN+u2e1wIZP7YguyvOD+PLx6nSFvefWc=)
                          2: 3130332e3135302e32322e302f32342d3234203d3e20313430333938.roa (hash: obby+PvQrLWYC3NU3QI0xYtZDC2hJcWlETHv+KWDEWM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.crl
                          rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:bd:b4:93:c2:f3:b3:23:78:f3:32:2c:08:d0:00:f7:60:39:fc:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B911D34F2E80140D63AE02F4CBE719E7D972C6F6
        Validity
            Not Before: Feb  2 03:16:15 2026 GMT
            Not After : Feb  5 12:48:15 2026 GMT
        Subject: CN=F8B5C23EC8D1655963E7AB3B2F622DBB83EA8B52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b4:68:fa:c5:01:04:e9:d0:13:b4:2f:4e:e2:
                    65:9d:a2:2b:42:22:fa:47:d2:b5:77:ad:24:81:0f:
                    9c:e0:d8:14:c0:f9:be:8c:fd:3e:27:96:ce:a6:58:
                    87:ad:82:eb:50:3a:19:e5:59:c0:15:8c:5e:c5:e7:
                    5c:0e:87:8b:07:28:1e:a4:d1:63:79:f3:61:79:57:
                    bb:03:70:7b:3e:ef:0c:7a:bc:8a:48:28:0c:be:87:
                    f6:80:28:ff:ab:f0:36:c5:da:29:cc:3d:dd:c9:6f:
                    07:36:c6:2d:f2:c1:8d:7d:a5:88:f1:cc:af:a9:8a:
                    46:7b:89:77:ef:11:ae:e7:89:ce:57:72:99:8f:9b:
                    17:e8:82:f3:b4:f2:d6:b7:38:5e:4b:30:f0:0d:47:
                    9c:ff:18:2a:af:44:07:a1:6c:b8:62:fb:a3:58:26:
                    78:f9:91:b7:ef:c3:35:4b:3c:eb:bd:23:21:b0:4f:
                    92:06:8f:ad:72:e8:08:b9:ea:c5:16:45:04:e2:de:
                    cf:be:66:7b:44:f5:2e:d5:7f:e8:b4:0f:b1:5c:3b:
                    0c:52:23:27:3b:aa:a0:21:f2:57:14:a5:e8:7a:22:
                    7f:bd:ae:fc:7a:cc:4c:8d:69:2d:57:b8:a1:d2:92:
                    2e:e9:02:fc:ad:3c:ba:ff:a9:33:f8:bb:9f:56:8a:
                    6f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B5:C2:3E:C8:D1:65:59:63:E7:AB:3B:2F:62:2D:BB:83:EA:8B:52
            X509v3 Authority Key Identifier:
                keyid:B9:11:D3:4F:2E:80:14:0D:63:AE:02:F4:CB:E7:19:E7:D9:72:C6:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:1e:96:a9:4e:6f:ac:f2:a9:1b:3e:96:9d:e2:19:8b:44:09:
         44:ad:ff:b4:33:7c:1d:b6:15:b4:d9:48:76:a9:bc:a0:e4:bf:
         4f:f2:b6:18:55:4b:44:06:ba:11:5b:61:a5:fd:45:2a:ce:ee:
         4a:56:15:ca:0a:69:c0:cc:5c:48:26:08:55:86:96:0b:24:55:
         70:1d:6d:ee:69:cc:7a:4c:f2:4a:f3:eb:89:b7:72:0f:b9:ee:
         26:ee:cc:2c:8e:af:39:db:a2:f7:19:8d:bc:2c:72:b1:74:36:
         d1:be:16:20:c3:94:ec:6e:12:10:ab:a2:82:08:d6:ce:6e:44:
         30:2f:8d:42:03:01:9e:55:0a:9a:2d:b1:e9:ef:24:49:63:35:
         95:43:b5:0b:c4:44:bb:2c:14:7a:92:d8:84:82:84:cd:a9:3f:
         81:cc:b6:d2:dd:fa:8f:77:78:31:ec:d2:c3:59:cb:3a:66:b4:
         9e:b4:e6:b3:85:c0:df:90:0a:03:dd:46:c1:ce:ad:ca:ad:a6:
         0f:95:3a:1c:e1:49:4f:81:2a:79:97:40:ca:a6:bd:ce:cb:ed:
         9f:db:08:72:b9:75:65:6b:09:2f:42:01:3a:5c:a3:46:57:80:
         f0:d6:8b:e1:4b:5c:bb:b4:11:cf:9a:39:3b:98:24:39:4a:34:
         69:e9:f2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:45:10 2026 by rpki-client